@posthog/mcp 0.10.1 → 0.10.2

package/dist/extensions/mcp-payloads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-payloads.d.ts","sourceRoot":"","sources":["../../src/extensions/mcp-payloads.ts"],"names":[],"mappings":"AAaA,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAiBzC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0B7D;AA6BD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAiBvE"}
+{"version":3,"file":"mcp-payloads.d.ts","sourceRoot":"","sources":["../../src/extensions/mcp-payloads.ts"],"names":[],"mappings":"AAkBA,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAsCzC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0B7D;AA6BD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAiBvE"}

package/dist/extensions/mcp-payloads.js

@@ -29,7 +29,12 @@ __webpack_require__.d(__webpack_exports__, {
 });
 const CONTEXT_ARGUMENT_NAME = 'context';
 const REDACTED_VALUE = '[redacted]';
+const BINARY_REDACTED_VALUE = '[binary data redacted - not supported by PostHog MCP analytics]';
 const BASE64_PATTERN = /^[A-Za-z0-9+/\n\r]+=*$/;
+const BASE64URL_PATTERN = /^[A-Za-z0-9_-]+={0,2}$/;
+const BASE64URL_SPECIFIC_CHAR_PATTERN = /[-_]/;
+const BASE64_DATA_URL_PREFIX_PATTERN = /^data:[^,\s]*;base64,/i;
+const BASE64_DATA_URL_PAYLOAD_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/;
 const SIZE_GATE = 10240;
 const POSTHOG_TOKEN_PATTERN = /\bph[a-z]_[A-Za-z0-9_-]{20,}\b/g;
 const SENSITIVE_KEY_PATTERN = /^(authorization|cookie|set-cookie|x-api-key|api[-_]?key|api[-_]?token|access[-_]?token|refresh[-_]?token|token|password|secret|client[-_]?secret|private[-_]?key)$/i;
@@ -39,8 +44,19 @@ function isRecord(value) {
 function shouldRedactKey(key) {
     return SENSITIVE_KEY_PATTERN.test(key);
 }
+function isBase64DataUrl(value) {
+    const prefix = BASE64_DATA_URL_PREFIX_PATTERN.exec(value);
+    if (!prefix) return false;
+    let payload;
+    try {
+        payload = decodeURIComponent(value.slice(prefix[0].length));
+    } catch  {
+        return false;
+    }
+    return BASE64_DATA_URL_PAYLOAD_PATTERN.test(payload.replace(/[\r\n]/g, ''));
+}
 function sanitizeString(value) {
-    if (value.length >= SIZE_GATE && BASE64_PATTERN.test(value)) return '[binary data redacted - not supported by PostHog MCP analytics]';
+    if (value.length >= SIZE_GATE && (BASE64_PATTERN.test(value) || isBase64DataUrl(value) || BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value))) return BINARY_REDACTED_VALUE;
     return value.replace(POSTHOG_TOKEN_PATTERN, REDACTED_VALUE);
 }
 function sanitizeCapturedValue(value) {

package/dist/extensions/mcp-payloads.mjs

@@ -1,6 +1,11 @@
 const CONTEXT_ARGUMENT_NAME = 'context';
 const REDACTED_VALUE = '[redacted]';
+const BINARY_REDACTED_VALUE = '[binary data redacted - not supported by PostHog MCP analytics]';
 const BASE64_PATTERN = /^[A-Za-z0-9+/\n\r]+=*$/;
+const BASE64URL_PATTERN = /^[A-Za-z0-9_-]+={0,2}$/;
+const BASE64URL_SPECIFIC_CHAR_PATTERN = /[-_]/;
+const BASE64_DATA_URL_PREFIX_PATTERN = /^data:[^,\s]*;base64,/i;
+const BASE64_DATA_URL_PAYLOAD_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/;
 const SIZE_GATE = 10240;
 const POSTHOG_TOKEN_PATTERN = /\bph[a-z]_[A-Za-z0-9_-]{20,}\b/g;
 const SENSITIVE_KEY_PATTERN = /^(authorization|cookie|set-cookie|x-api-key|api[-_]?key|api[-_]?token|access[-_]?token|refresh[-_]?token|token|password|secret|client[-_]?secret|private[-_]?key)$/i;
@@ -10,8 +15,19 @@ function isRecord(value) {
 function shouldRedactKey(key) {
     return SENSITIVE_KEY_PATTERN.test(key);
 }
+function isBase64DataUrl(value) {
+    const prefix = BASE64_DATA_URL_PREFIX_PATTERN.exec(value);
+    if (!prefix) return false;
+    let payload;
+    try {
+        payload = decodeURIComponent(value.slice(prefix[0].length));
+    } catch  {
+        return false;
+    }
+    return BASE64_DATA_URL_PAYLOAD_PATTERN.test(payload.replace(/[\r\n]/g, ''));
+}
 function sanitizeString(value) {
-    if (value.length >= SIZE_GATE && BASE64_PATTERN.test(value)) return '[binary data redacted - not supported by PostHog MCP analytics]';
+    if (value.length >= SIZE_GATE && (BASE64_PATTERN.test(value) || isBase64DataUrl(value) || BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value))) return BINARY_REDACTED_VALUE;
     return value.replace(POSTHOG_TOKEN_PATTERN, REDACTED_VALUE);
 }
 function sanitizeCapturedValue(value) {

package/dist/extensions/sanitization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitization.d.ts","sourceRoot":"","sources":["../../src/extensions/sanitization.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAS/C;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAmBrE"}
+{"version":3,"file":"sanitization.d.ts","sourceRoot":"","sources":["../../src/extensions/sanitization.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAmB,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAShE;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAuBrE"}

package/dist/extensions/sanitization.js

@@ -37,8 +37,19 @@ function sanitizeEvent(event) {
     if (null != result.response) result.response = sanitizeResponse(result.response);
     if (null != result.parameters) result.parameters = sanitizeParameters(result.parameters);
     if (null != result.userIntent) result.userIntent = (0, external_mcp_payloads_js_namespaceObject.sanitizeCapturedValue)(result.userIntent);
+    if (null != result.error) result.error = sanitizeExceptionValues(result.error);
     return result;
 }
+function sanitizeExceptionValues(error) {
+    if (!Array.isArray(error.$exception_list)) return error;
+    return {
+        ...error,
+        $exception_list: error.$exception_list.map((exception)=>({
+                ...exception,
+                value: (0, external_mcp_payloads_js_namespaceObject.sanitizeCapturedValue)(exception.value)
+            }))
+    };
+}
 function sanitizeResponse(response) {
     if (null == response || 'object' != typeof response) return (0, external_mcp_payloads_js_namespaceObject.sanitizeCapturedValue)(response);
     const sanitized = (0, external_mcp_payloads_js_namespaceObject.sanitizeCapturedValue)(response);

package/dist/extensions/sanitization.mjs

@@ -9,8 +9,19 @@ function sanitizeEvent(event) {
     if (null != result.response) result.response = sanitizeResponse(result.response);
     if (null != result.parameters) result.parameters = sanitizeParameters(result.parameters);
     if (null != result.userIntent) result.userIntent = sanitizeCapturedValue(result.userIntent);
+    if (null != result.error) result.error = sanitizeExceptionValues(result.error);
     return result;
 }
+function sanitizeExceptionValues(error) {
+    if (!Array.isArray(error.$exception_list)) return error;
+    return {
+        ...error,
+        $exception_list: error.$exception_list.map((exception)=>({
+                ...exception,
+                value: sanitizeCapturedValue(exception.value)
+            }))
+    };
+}
 function sanitizeResponse(response) {
     if (null == response || 'object' != typeof response) return sanitizeCapturedValue(response);
     const sanitized = sanitizeCapturedValue(response);

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "0.10.1";
+export declare const version = "0.10.2";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -26,7 +26,7 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     version: ()=>version
 });
-const version = '0.10.1';
+const version = '0.10.2';
 exports.version = __webpack_exports__.version;
 for(var __webpack_i__ in __webpack_exports__)if (-1 === [
     "version"

package/dist/version.mjs

@@ -1,2 +1,2 @@
-const version = '0.10.1';
+const version = '0.10.2';
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@posthog/mcp",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "bugs": {
     "url": "https://github.com/PostHog/posthog-js/issues"
   },
@@ -28,7 +28,7 @@
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
   "dependencies": {
-    "@posthog/core": "^1.45.1"
+    "@posthog/core": "^1.46.1"
   },
   "devDependencies": {
     "@babel/preset-env": "^7.27.1",
@@ -39,8 +39,8 @@
     "@types/node": "^20.0.0",
     "jest": "29.7.0",
     "zod": "^3.25.0",
-    "@posthog-tooling/tsconfig-base": "1.1.1",
-    "posthog-node": "^5.46.1"
+    "posthog-node": "^5.47.2",
+    "@posthog-tooling/tsconfig-base": "1.1.1"
   },
   "peerDependencies": {
     "@modelcontextprotocol/sdk": ">=1.26.0",

package/src/extensions/mcp-payloads.ts

@@ -5,7 +5,12 @@
 
 const CONTEXT_ARGUMENT_NAME = 'context'
 const REDACTED_VALUE = '[redacted]'
+const BINARY_REDACTED_VALUE = '[binary data redacted - not supported by PostHog MCP analytics]'
 const BASE64_PATTERN = /^[A-Za-z0-9+/\n\r]+=*$/
+const BASE64URL_PATTERN = /^[A-Za-z0-9_-]+={0,2}$/
+const BASE64URL_SPECIFIC_CHAR_PATTERN = /[-_]/
+const BASE64_DATA_URL_PREFIX_PATTERN = /^data:[^,\s]*;base64,/i
+const BASE64_DATA_URL_PAYLOAD_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/
 const SIZE_GATE = 10_240
 const POSTHOG_TOKEN_PATTERN = /\bph[a-z]_[A-Za-z0-9_-]{20,}\b/g
 const SENSITIVE_KEY_PATTERN =
@@ -21,9 +26,30 @@ function shouldRedactKey(key: string): boolean {
   return SENSITIVE_KEY_PATTERN.test(key)
 }
 
+function isBase64DataUrl(value: string): boolean {
+  const prefix = BASE64_DATA_URL_PREFIX_PATTERN.exec(value)
+  if (!prefix) {
+    return false
+  }
+
+  let payload: string
+  try {
+    payload = decodeURIComponent(value.slice(prefix[0].length))
+  } catch {
+    return false
+  }
+
+  return BASE64_DATA_URL_PAYLOAD_PATTERN.test(payload.replace(/[\r\n]/g, ''))
+}
+
 function sanitizeString(value: string): string {
-  if (value.length >= SIZE_GATE && BASE64_PATTERN.test(value)) {
-    return '[binary data redacted - not supported by PostHog MCP analytics]'
+  if (
+    value.length >= SIZE_GATE &&
+    (BASE64_PATTERN.test(value) ||
+      isBase64DataUrl(value) ||
+      (BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value)))
+  ) {
+    return BINARY_REDACTED_VALUE
   }
   return value.replace(POSTHOG_TOKEN_PATTERN, REDACTED_VALUE)
 }

package/src/extensions/sanitization.ts

@@ -3,7 +3,7 @@
 // Copyright (c) 2025 AgentCat, Inc. (formerly MCPcat)
 // Licensed under the MIT License: https://github.com/agentcathq/agentcat-typescript-sdk/blob/main/LICENSE
 
-import type { Event, McpEvent } from '../types'
+import type { ErrorProperties, Event, McpEvent } from '../types'
 import { sanitizeCapturedValue } from './mcp-payloads'
 
 type SanitizedRecord = Record<string, unknown>
@@ -39,9 +39,31 @@ export function sanitizeEvent<T extends Event | McpEvent>(event: T): T {
     result.userIntent = sanitizeCapturedValue(result.userIntent) as string
   }
 
+  if (result.error != null) {
+    result.error = sanitizeExceptionValues(result.error)
+  }
+
   return result
 }
 
+/**
+ * Sanitizes exception messages before they fan out to both the primary MCP
+ * event's error-message property and the `$exception` sibling.
+ */
+function sanitizeExceptionValues(error: ErrorProperties): ErrorProperties {
+  if (!Array.isArray(error.$exception_list)) {
+    return error
+  }
+
+  return {
+    ...error,
+    $exception_list: error.$exception_list.map((exception) => ({
+      ...exception,
+      value: sanitizeCapturedValue(exception.value) as string,
+    })),
+  }
+}
+
 /**
  * Sanitizes response content blocks by replacing non-text content types
  * with informative redaction messages.

package/src/version.ts

@@ -1 +1 @@
-export const version = '0.10.1'
+export const version = '0.10.2'